mention systems without mmap or MAP_ANON
This commit is contained in:
parent
263d68fc56
commit
828b196214
|
@ -8,6 +8,10 @@ More information is available at:
|
|||
Privilege separation is now enabled by default; see the
|
||||
UsePrivilegeSeparation option in sshd_config(5).
|
||||
|
||||
On systems which lack mmap or anonymous (MAP_ANON) memory mapping,
|
||||
compression must be disabled in order for privilege separation to
|
||||
function.
|
||||
|
||||
When privsep is enabled, the pre-authentication sshd process will
|
||||
chroot(2) to "/var/empty" and change its privileges to the "sshd" user
|
||||
and its primary group. You should do something like the following to
|
||||
|
@ -53,4 +57,4 @@ process 1005 is the sshd process listening for new connections.
|
|||
process 6917 is the privileged monitor process, 6919 is the user owned
|
||||
sshd process and 6921 is the shell process.
|
||||
|
||||
$Id: README.privsep,v 1.6 2002/06/21 14:45:50 djm Exp $
|
||||
$Id: README.privsep,v 1.7 2002/06/21 14:48:02 djm Exp $
|
||||
|
|
Loading…
Reference in New Issue